In the Specification 
Kindly add the following paragraph after the title. 

Related Application 

[0001] This is a S371 of International Application No. PCT/FR2005/000636, with an 
international filing date of March 16. 2005 (WO 2005/101847 AK published October 27. 2005), 
which is based on French Patent Application No. 04/5052 L filed March 16. 2004. 

Kindly replace paragraphs f 0001 J through [0037] with the following: 
Technical Field 

Th e pres e nt inv e ntion This disclosure relates to the area of the highly secure distribution 
of digital audiovisual sequences. 

[0002] Th e pr e sent inv e ntion propos e s malcing available a proc e ss and a system that p e rmit the 

visual and/or auditor)^ prot e ction of a digital audiovisual sequence issu e d from a digital compression 
standard or from a digital compr e ssion norm, the distribution in a highly secur e mann e r of this 
sequ e nce via a tel e communication network and the roconstitution of its original content from a 
prot e ct e d audiovisual str e am on a r e composition modul e of th e e quipm e nt of th e addr e ss ee . 

State of th e art 

Th e US patent US 6,351,538 with th e title "Conditional Access and Copy Protection 
Scheme for MPEG Encod e d Video Data" is Icnown from the stat e of th e art. 

This docum e nt concerns the discloses protection of a digital video stream. The 

protection is applied when the video stream is in the process of being digitized. The digital video 
stream is considered as being composed of a stream of video images coded by compensation of 
movement and ef a second stream of video image called a r e f e r e nce "reference" and serving to 
predict movement. According to this document of th e prior art th e The reference stream of video 
images is encrypted and the quantity of data to be encrypted in order to protect the stream is therefore 
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reduced. The parameters that permitted this . encryption operation to be realized are stored in the 
digital video stream in a part reserved for this purpose. The encryption of the reference images is 
sufficient to protect the content of the digital video stream because the rest of the digital video stream 
is composed of video image coded by compensation of movement from the reference video image 
stream. A double encryption operation is carried out, an encryption of the reference images by a first 
simple encryption function (application of an XOR or exclusive) then a complex encryption of the 
parameters of the first function by a second more complex encryption function. This double 
encryption allows the protection to be concentrated on the data quantity even less than the quantity 
that the reference images represent. The stream of video images coded by compensation of 
movement and the stream of reference video images (then protected) are then multiplexed in ord e r to 
form the protected compressed video stream. 

This solution That system does not provide a separation into two streams. It describes a 
decomposition into two sets composed on th e on e hand of reference video images and ef video 
images obtained by compensation of movemen t whereas our invention realizes a physical s e paration 
of th e video str e am into two str e ams, a modifi e d main str e am that is thus an auto prot e ct e d 
compressed vid e o stream and a compl e mentary stream . 

The -Thus. the proble m of th e pr e s e nt inv e ntion is to preserve the format of the digital 

video stream and bring about the protection a posteriori [Latin = inductively] of the compression, 
which is not the case in the inv e ntion of the document of the prior art US '538 in which it is clearly 
stated that the protection is made during the encoding of the video stream. 

Finally, no analysis of the original digital stream is preformed in order to analyze the 
conformity of the data in it. Consequently, th e invention of document D 1 US '538 may render the 
protected digital video stream not in conformity with the standard from which it issued. 

The prior art also compris e s the int e rnational pat e nt WO 03/007608 discloses with the 
title ''Motion Picture Encryption Method and Apparatus with Variabl e Security". 

According to this docum e nt of th e prior art the protection of a digital video stream is 

realized by an encryption method at the level of variable security. 

The compressed video stream is divided into blocks with a fixed size. The protection is 
performed on these digital data blocks. The protection is performed on each block in turn. Only 
several bytes are encrypted in each block and the rest of the block remains unchanged. The choice of 
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bytes to be protected is obtained by a pseudorandom generator or by a "look-up table". The byte 
selected can also be encrypted by using a "look-up table". 

According to this docum e nt of th e prior art only Only three per cent of each block has to 

be encrypted in ord e r to obtain a satisfactory degradation of the compressed digital stream rendering 
it illegible for a standard rendering apparatus. 

This solution of th e prior art That system does not perform a separation into two 
compressed video streams^ as our inv e ntion do e s but performs its decomposition into blocks of a 
fixed size that are treated independently in ord e r to encrypt some date of each block. The goal of Shs 
that encryption operation is to render the compressed video stream illegible for a standard decoder 
and cons e qu e ntly th e inv e ntion of docum e nt D2 is fundam e ntally diff e r e nt from our inv e ntion, that 
performs a prot e ction op e ration while retaining th e str e am in conformity with th e original format, 
that is, r e adabl e by a standard d e cod e r . 

It is currently possible to transmit audiovisual programs in digital form via broadcasting 
networks of the microwave, cable, satellite type, etc.. or via telecommunication networks of the DSL 
(Digital Subscriber Line) or BLR (Loop Local Radio) type or via DAB networks (Digital Audio 
Broadcasting) as well as via any wireless telecommunication network of the GSM. GPRS. EDGE, 
UMTS. Bluetooth. WiFi type, etc. Moreover, to avoid pirating works broadcast in this manner, they 
are frequently encrypted or scrambled by various well-known means. 

W. Zeng et al. published in the ACM Multimedia Proceedings of the Intemational 
Conference in October. 1999 and titled "Efficient Frequency Domain Video Scrambling for Content 
Access Control'' is also known for the area of encryption. That article describe a method of 
protecting digital data coding a multimedia content. The method is based on pseudorandom 
generators for generating three base pseudorandom operations (bit inversion, permutation and 
rotation of block of coefficients) that can be combined and controlled by encryption keys. The set of 
original data is present in the protected stream and access to the original content is entirely 
conditioned on possession or not of encryption keys. However, that solution does not use different 
modelings of pseudorandom generators nor data of the original stream such as a cryptographic key. 
Given that all the original data of the stream remains inside the protected stream, that method 
represents a classic encryption solution and, consequently, does not correspond to this disclosure. 
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Concerning the separation of an audiovisual stream into two parts in order to protect it. 
"Protecting VoD the Easier Way". Griwodz et al.. Proceedings of the ACM Multimedia. September, 
1 998 describes a process of distribution via broadband networks or temporary servers and a point to 
point secure connection of protected multimedia content whose access is controlled and traced. The 
original auto visual stream is deliberately corrupted by a predetermined modification of certain bytes 
in the stream without any analysis of the structure and the content of the stream, therefore, without 
taking account of the conformity with the native format, which bytes are selected according to a 
predefined law (Poisson' s law). A signal permitting reconstruction is transmitted subsequently to the 
client at the moment of viewing the content: A key is first communicated to the client that allows the 
client to recalculate emplacement of the corrupted bytes in the stream. Then, a signal containing the 
original bytes is sent to the client after encryption to reconstruct the initial stream. Reconstruction of 
the stream is thus conditioned by a simple key and consequently does not provide a high level of 
security . 

Summary 

This disclosure, thus, relates to a process for distributing audiovisual sequences 
according to an original stream format having a succession of frames, the original stream on which 
an analysis is made, prior to transmission to client equipment, to generate a first modified main 
stream and complementary information, then the modified main stream and the complementary 
information are transmitted separately to equipment of an addressee, and for which a synthesis of a 
stream in the original format is calculated on the equipment of the addressee as a function of the 
modified main stream and the complementary information, wherein the analysis of the original 
stream includes: 

an operation application stage comprising modelings generating sequences of pseudorandom 
values with known parameters. 

a stage for the extraction of original data as a function of pseudorandom sequences, and 
' a stage for storage of the parameters of the modelings in the complementary information. 

This disclosure also relates to a system for producing an audiovisual stream, including at least 
one multimedia server containing original audiovisual sequences, an apparatus analysis of the 
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audiovisual stream for separation of an original video stream into a modified main stream and into 
complementary information as a function of the analysis, at least one telecommunication network for 
transmission and at least one apparatus in the equipment of the addressee for reconstruction of the 
audiovisual stream as a function of the modified main stream and the complementary information. 

This disclosure further relates to a process for distributing audiovisual sequences according to 
an original stream format having a succession of frames including: 

performing modelings on the original stream to generate sequences of pseudorandom values 

with no parameters: 

extracting original data as a function of pseudorandom sequences: 

generating a first modified main stream and complementary information: 

storing at least one parameter from the modelings in the complementary information: 

separately transmitting the modified main stream and the complementary information to an 

addressee: and 

synthesizing a stream in original format by equipment of the addressee as a function of the 

modified main stream and the complementary information. 

Brief Description of the Drawings 

Fig. 1 graphically shows a pseudorandom generator. 
Fig. 2 schematically shows selected aspects of complementary information. 
Fig. 3 schematically shows an example of a secure system for distributing audiovisual 
streams. 
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Subj e ct matter of the inventio ft Detailed Description 

The invention provides a process and a system that permit the visual and/or auditory 
protection of a digital audiovisual sequence issued from a digital compression standard or from a 
digital compression norm, the distribution in a highly secure manner of the sequence via a 
telecommunication network and reconstitution of its original content from a protected audiovisual 
stream on a recomposition module of the equipment of the addressee. 

The present invention relates more particularly to an apparatus capable of transmitting in a 
secure manner via a telecommunication network a set of high-quality audiovisual streams to a 
viewing screen and/or to an audio output belonging to a terminal or to a display apparatus such as a 
television screen, a computer or even a mobile telephone, a mobile terminal of the PDA type 
(Personal Digital Assistant) or the like while preserving the audiovisual quality^ but avoiding 
fraudulent use such as the possibl e possibility of making pirated copies of the broadcast contents. 

Th e inv e ntion advantageously r e lates to We disclose a process and a client-server system that 
protects the audiovisual contents by separating them into two parts, which second part is absolut e ly 
indispensable for the reconstitution of the original stream, which the latter of which is restored as a 
function of the combination of the first part. 

The process us e d in th e pres e nt invention for th e d e scription of a pr e f e rr e d but non limiting 
exemplar}^ e mbodiment s e parates may separate the audiovisual stream into two parts in such a 
manner that the first part called the "modified main stream" contains the quasi-totality of the initial 
information, e.g., more than 99%, and a second part called "complementary information" containing 
targeted elements of the original information and that is of a very small size relative to the first part. 

It is curr e ntly possibl e to transmit audiovisual programs in digital form via broadcasting 
networks of the microv/av e , cable, satellite typo, etc., or via telecommunication n e tworks of the DSL 
(Digital Subscrib e r Lino) or BLR (Loop Local Radio) type or via DAB networks (Digital Audio 
Broadcasting) as well as via any wir e l e ss t e l e oommxmication n e twork of th e GSM, GPRS, EDGE, 
UMTS, Blu e tooth, WiFi t>^p e , e tc. Moreover, in ord e r to avoid the pirating of works broadcast in 
this mann e r, th e y ore frequ e ntly e ncrypt e d or scrambled by various w e ll Icnown m e ans by the prior 

C41 Ir. 
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The articlo writt e n by W. Z e ng et al. publish e d in th e ACM Multimedia Proceedings of the 
International Conf e renc e in Octob e r, 1999 and titl e d "Effioi e nt Fr e qu e ncy Domain Video Scrambling 
for Cont e nt Acc e ss Control" is also Icnown in th e prior art for th e area of encryption. In this That 
articl e th e authors d e scrib e a m e thod of protecting digital data coding a multimedia content. Th e 
m e thod is bas e d on ps e udorandom gen e rators for g e n e rating thr ee bas e ps e udorandom operations (bit 
inv e rsion, p e rmutation and rotation of block of co e ffici e nts) that can b e combined and controll e d by 
e ncryption k e ys. In this prior art th e Th e s e t of original data is pr e s e nt in th e protect e d str e am and 
th e acc e ss to the original cont e nt is entir e ly condition e d by the on possession or not of e ncryption 
keys. However, this that solution do e s not use diff e rent modelings of ps e udorandom gen e rators nor 
data of the original str e am such as a cryptographic k e y. Giv e n that all th e original data of th e str e am 
remains insid e the prot e ct e d str e am, this prior art that m e thod repres e nts a classic encryption solution 
and, cons e qu e ntly, do e s not corr e spond to th e objectiv e s of high security, subject matt e r of th e 
pres e nt inv e ntion this disclosur e . 

Concerning th e s e paration of an audiovisual stream into two parts in ord e r to protect it, the 
prior art contains th e articl e "Prot e cting VoD th e Easier Way", Griwodz e t al.. Proc ee dings of th e 
ACM Multimedia, Septemb e r, 1 998 in v/hich th e authors describe describ e s a process of distribution 
via broadband n e tworks or t e mporary s e rv e rs and a point to point s e cur e conn e ction of prot e cted 
multim e dia cont e nt whos e acc e ss is controlled and trac e d. Th e original auto visual str e am is 
d e liberately corrupt e d by a pr e det e rmin e d modification of certain b>1:es in th e str e am without any 
analysis of th e structure and of the content of the stream, therefore, without talcing account of th e 
conformit>^ with th e nativ e format, which byt e s ar e se l e ct e d according to a pr e d e fin e d law (Poisson's 
law). A signal p e rmitting the reconstruction is transmitted subsequently to the client at the moment 
of th e vi e wing of th e content: A k e y is first communicated to th e cli e nt that allows him th e client to 
recalculate the emplac e m e nt of th e corrupted b>1: e s in the str e am. Then, a signal containing the 
original bytes is sent to him the client aft e r encryption in order to r e construct th e initial stream. Th e 
r e construction R e construction of th e str e am is thus conditioned by a simpl e k e y and consequently th e 
proc e ss described in this docum e nt of th e prior art do e s not provid e the a high l e vel of security 
proposed in the pr e sent invention. 

The pres e nt invention This disclosure also concerns modelings of pseudorandom processes 
used to define at which location and which modification will be applied, which modelings are a 
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mathematical model describing a random natural phenomenon. These pseudorandom processes are 
initialized by different grains. The random process generating the grains is also modified 
dynamically by a set of parameters relative to its modeling during the generation of the 
pseudorandom sequence. 

These initialization grains and th e se modeling parameters are advantageously the data 
extracted from the original stream. The protection applied to the contents distributed by the secure 
system in th e present inv e ntion is advantageously based on the principle of the deletion and the 
replacement of certain information present in the encoded original audiovisual signal by any method 
such as: Substitution, modification, permutation or shifting of the information. This protection is 
also based on a knowledge of the structure of the digital stream. The This solution consists in 
extracting extracts and permanently pr e serving preserves in a secure server connected to the 
broadcasting and transmission netMrork a part of the data of the audiovisual program recorded at the 
user's or directly broadcasted in this complementary information, which part is of prime importance 
for reconstituting this the audiovisual program^ but has a volume that is very small relative to the 
total volume of the digital audiovisual program recorded at the user's or received in real time by the 
user. The lacking part (the complementary information) will be transmitted via the secure network 
advantageously distributed by broadcasting or transmission at the moment of ^ viewing and/or the 
hearing of this the audiovisual program. The data removed in the original audiovisual program is 
advantageously substituted[,] in ord e r to form the modified main stream[,] by random or calculated 
data called decoys. 

The fact of having removed and substituted with decoys a part of the original data of the 
original audiovisual stream during ^ generation of the modified main stream does not permit the 
restitution of this the original stream only from the data of this tiie modified main stream. In on 
embodiment this The modified main stream is may be totally compatible with the format of the 
original stream and can therefore be copied and read by a reader^ but it is completely incoherent from 
the viewpoint of human visual and auditory perception. In anoth e r e mbodim e nt this The modified 
main stream has may have any format. 

Once the digital stream is separated into two parts^^ the largest part, the modified main stream, 
is then transmitted via a classic broadcasting network whereas the lacking part, feis the 
complementary information, is sent on demand via a narrow band telecommunication network such 
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as the classic telephone networks or cellular networks of the GSM, GPRS, EDGE or UMTS or by 
using a small part of a network of the DSL or BLR type, or by using a subset of the broadband shared 
on a cable network, or also via a physical support such as a memory card or any other support. In a 
particular^ e mbodim e nt the two networks can be combined while retaining the two separate 
transmission paths. The audiovisual stream is reconstituted on the addressee's equipment by a 
synthesizing module from the modified main stream and from the complementary information sent 
piece by piece during th e using use of the audiovisual stream. 

The fact that the complementary information represents a quite small part of the original 
stream, e.g., 1%, allows it to be sent through networks with a low transmission rate. When the 
modified main stream has already been downloaded on the hard disk of the equipment of the 
addressee, the complementary information is preferably sent via a narrow band network. 
Complementary information with a low size facilitates its distribution on every type of network and 
contributes to the reinforcement of security. 

The subj e ct matt e r of th e pres e nt inv e ntion disclosure further concems an analysis module 
that implements a securing process in such a manner as to optimize the structure and the content of 
the complementary information with the aid of different algorithms and modelings in ord e r to 
minimize the size of this tiie complementary information and to reinforce security. 

The pre se nt inv e ntion disclosure also concems in its most g e neral m e aning a process for Sie 
distribution of distributing audiovisual sequences according to an original stream format constituted 
by of a succession of frames, ^us die original stream on which an analysis is made, prior to 
transmission to the client equipment, in ord e r to generate a first modified main stream and 
complementary information, then the modified main stream and the complementary information are 
transmitted separately to the equipment of the addressee, and for which a synthesis of a stream in the 
original format is calculated on the equipment of the addressee as a function of this the modified 
main stream and of this the complementary information, which analysis of the original stream is 
constituted by: 

[-]Ah an operation application stage comprising modelings generating sequences of 
pseudorandom values with known parameters, 

[-]A a stage for the extraction of original data as a function of th e se the pseudorandom 
sequences, and 
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[-] A a stage for the storage of these parameters of these the modelings in the complementary 
information. 

According to an e mbodiment these The parameters afe may be stored integrally in the 
complementary information. 

According to anoth e r e mbodim e nt th e s e The parameters are may also be stored partially in 

the complementary information. 

Those The pseudorandom values advantageously represent information relative to at least one 
characteristic of the data extracted in the original stream. 

These pseudorandom values advantageously represent information relative to the position of 

the data extracted in the original stream. 

Furthermore, th e s e the parameters of th e se the modelings are random. 

According to a variant th e s e The parameters of th e se the modelings afe maybe data extracted 
from the original stream. 

According to anoth e r variant th e se The modelings €ffe maybe random. 

Th e se The modelings are advantageously generated from at least one characteristic of the 
analysis equipment. 

Thes e The modelings are advantageously stored in the analysis equipment. 

In on e e mbodiment th e s e The modelings used by the analysis equipment are maybe sent in 

advance by the equipment of the addressee. 

In anoth e r e mbodim e nt th e se The modelings are may also be stored in a smart card of the 

equipment of the addressee. 

This synth e sis Synthesis of the original stream is preferably carried out as functions of the 
parameters of the modelings, reproducing the pseudorandom values obtained during the analysis 
stages. 

Kindly replace paragraphs [0039] through [0046] with the following: 

Th e pr ese nt invention We also concems disclose a system for the implementation of the 
process, comprising at least one multimedia server containing the original audiovisual sequences, 
comprising an apparatus for the analysis of the audiovisual stream for the separation of the original 
video stream into a modified main stream and krte complementary information as a function of Sris 
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the analysis, at least one telecommunication network for the transmission and at least one apparatus 
in the equipment of the addressee for the reconstruction of the audiovisual stream as a function of 
this the modified main stream and of this the complementary information. 

The pres e nt invention will be better und e rstood with th e aid of th e e xemplary e mbodim e nts 
and of th e d e tail e d stages b e low. 

The complementary information represents the set of data and information necessary for the 
reconstruction of the original stream. It advantageously contains the original extracted values, their 
positions and information necessary for fee reconstruction, that are relative to the characteristics of 
this the original data of the stream. However, in this instance^ the information about the position of 
the original data have a size on the order of 50% of the complementary information. A compression 
Compression of the complementary information proved to be ineffective on account of the fact that 
the positional information is statistically independent and therefore with has a low redundancy. 
Moreover, the presence of voluminous positional information limits the security ail the more because 
there is so much original data that is not extracted, substituted by decoys and stored in the 
complementary information. 

The pr e s e nt inv e ntion advantag e ously propos e s reducing We reduce the numb e r amount of 
information contained in the complementary information concerning the original data and te define it 
with the aid of modelings. In this manner^ this the information is reproduced during the 
reconstitution of the original stream, the modelings and their parameters being known. 

A pref e rr e d but non - limiting exemplary embodiment Representative, selected examples are 
described in th e pr e sent invention conc e ms below with respect to modelings and algorithms of 
generators of pseudorandom sequences, initialized by random processes. 

A random process is an, e.g., temporal signal s(t) for which the value can not be provided in 
advance whatever the considered instant. Such a process is generated either by using unforeseeable 
physical phenomena (such as the phenomena of the degradation of the atoms of radioactive 
elements) or by using pseudorandom processes coupled with random factors (such as an algorithm of 
the "wheel of fortune) type. Very complex (depending on phenomena not always mastered by aft 
e xp e rt one skilled in the art) and with constraints on the execution time that are too great on a 
computer, random processes are generally used in combination with pseudorandom processes. 
Random processes are used for fee modeling and initialization of pseudorandom generators. 
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A pseudorandom process is a deterministic process that allows fee generation of a sequence 
of numbers that possesses a distribution selected in a more or less uniform manner. These processes 
are initialized by a grain that serves as a starting point for the sequence. The advantage of 
pseudorandom processes is that they are rapid (short execution time for a computer) because they are 
issued from not very complex mathematical calculations. The quality of a pseudorandom generator 
is measured as a function of its period (number of minimal values that the sequence contains before 
reproducing itself identically) and ef the equidistribution that it will supply in several directions. An 
efficient pseudorandom generator has a long period and an equidistribution in a large number of 
direct actions. 

An example of a pseudorandom generator of numbers (congruent linear pseudorandom 
generator) is described by the following expression, in which Sn is the term of the sequence, M-1 the 
maximal value for the term Sn, and A and B are respectively the slope and the ordinate at the origin 
of a straight line F of the equation: 

Sn+i=(Sn*A+B) mod (M). 
The term Sn represents in ew this case the grain maintained as follows: 

grain = (grain * 0x5DEECE66DL + OxBL) & 

((1L«48)-1; 

Sn=grain 

A=0x5DEECE66DL 
B=OxBL 

mod (M) = &((1L«48)-1); 

Kindly replace paragraph [0048] with the following: 

Figure Fig. 1 illustrates an example of a pseudorandom generator. 

Kindly replace paragraph [0051] to [0055] with the following: 

Exemplary embodiments Representative, selected examples are described in the following 
that implement modelings of congruent linear functions that produce pseudorandom values that are 
used during the analysis and fee synthesis. 
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The analysis performed in ord e r to separate the original stream into a modified main stream 
and inte complementary information advantageously uses a large number of modelings of 
pseudorandom processes in order to guarantee a maximum of randomness and to thus furnish 
elevated security. This analysis is constituted by of the following stages: 

[-]Aft an operation application stage comprising modelings of pseudorandom processes, 
generating sequences of pseudorandom values with known parameters, 

[-] A a stage for the extraction of the original data as a function of thes e the pseudorandom 
sequences, 

[-] A a stage for the introduction of the decoy data in place of the extracted original data, 
[-]A a stage for the storage of th e s e the parameters of th e s e the modelings in the 
complementary information. 

The protection process for each of the different digital formats has its own analysis algorithm 
constituted by of the enumerated stages in guaranteeing an audiovisual degradation. Including the 
pseudorandom processes, Shs the analysis ensures the unicity and ^ effectiveness of the protection. 
It is at this moment of the process that the degree of security introduced into a stream is defined 
from the possible combinations generated by the pseudorandom process. The pseudorandom 
sequences generated during the analysis are advantageously used for: 

- Selecting the position of data to be extracted, 

- Selecting the number of data to be extracted for a given stream portion, 

- Selecting the size of the stream portion to be protected, 

- Selecting the number of portions to be protected, 

- Selecting the decoys and inserting them in place of the original data. 

As concems the evaluation of the degree of security introduced, the known AES 
("Asymmetric Encryption System") protection process by encryption is taken as reference from the 
prior art. The key has a length of 128 bits and the number of possible combinations is therefore: 
2^^^=3.40e+8 possibilities of a key with 128 bits. 

The We pose the hypothesis is pos e d in th e pr e s e nt invention that all the events are random, a 
stream portion with a length of 300 bytes is taken in which "n" = 5 decoys, for example, is added, 
each of which decoys has a length of one byte. The following result is obtained: An account is taken 
of all the combinations of 5 bytes among 300, which makes 1 ,96e+ 1 2 possible words, knoAving that 
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there are 2 binary words or I,10e-Hl2 possible words, and a total of 2.37e+34 possibilities are 
finally obtained. It was assumed that the number of decoys for realizing this calculation was known, 
namely, 5 decoys for a portion of 300 bytes. In the case in which the value of "n" would not be 
known, the total number of possibilities is obtained by summing the results for each of the "n" from 
1 to 300, which produces a considerably augmented number of possibilities^ [-] with With 300 
decoys there is a combination of 300 bytes among 300 and 2^^^^ possible binary words, therefore, 
plus n (the number of decoys) is great the more the number of possibilities increases. However, the 
preceding hypothesis considers that all the samplings are random except in a real case of an analysis 
algorithm the sequences generated are pseudorandom, therefore, an ill-intentioned person could 
decide to search for the grain from which the pseudorandom sequence was generated. Knowing that 
the positions were generated by a grain of 32 bits over an interval of 300 values, this yields 
2^^*256^=4.73e+21 possibilities for finding the values of the positions of the decoys (for a grain of 
64 bits, 2.10e+31 possibilities are obtained, and likewise it is necessary to make the sum from 1 to 
300 for each possible "n" in the portion described). In conclusion, it is easier for an ill-intentioned 
person to search for the grain than an exhaustive search of the positions of the decoys from the 
protected stream. However, when a grain coded for 128 bits is selected, the number of possibilities 
for the grain is identical to the number of keys possible for the AES method with a key coded for 128 
bits. 

Kindly replace paragraphs [0057] to [0063] with the following: 

In this instance^ a criterion for the evaluation of the security is the number of grains necessary 
for the process and the maimer in which the sequences are generated. 

The parameters A, B, M and So for #ie modeling of the generator are advantageously selected 
randomly and remain unchanged for a portion of a given stream, e.g., for N consecutive bytes. At the 
end of this portion the parameters A, B, M and So are modified, thus, reselected in a random manner. 
In this manner^ the set of modeling parameters A, B, M and So is changed every N bytes and N itself 
is advantageously random. The set of modeling parameters A, B, M and So is preferably changed 
each time that the value Smax is exceeded. 

As concems Ae recomposition of the original stream during the synthesis on the equipment 
of the addressee^ it is indispensable to recover the original values of the data extracted from the 
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original stream and their placements in the stream. However, storing their true values and their 
placements in the complementary information produces a complementary information containing 
much data that can be recalculated from the modeling parameters used during the analysis. 
Consequently, an optimization of the size of the complementary information is performed by storing 
in the interior only the original extracted data and modeling parameters from which the positions and 
other characteristics of the original data are reproduced during the synthesis on the equipment of the 
addressee. Consequently, since the data relative to the original positions is on the order of 50% of 
the complementary information, the size of the complementary information is greatly reduced, all the 
while ensuring the audiovisual degradation and increasing the security because it furnishes the 
possibility of extracting more original data and of introducing more decoys. 

In anoth e r e mbodim e nt th e The original data is maybe extracted without the introduction of 
decoys in its place. 

The analysis determining the characteristics of the data to be extracted is carried out taking 
three constraints into account: 

- The degradation of the content, 

- The security, 

- The transmission rate of the complementary information. 

Since the relationship between these three constraints is very complex^ it is proposed to reduce the 
size of the complementary information without, however, reducing Sie security and the audiovisual 
degradation. 

Figur e Fig. 2 represents the complementary information containing the values generated by 
the modeling, namely, the positions P ( figur e Fig. 2a) and the original extracted data D. Figure 3d 2b 
represents the complementary information containing the modeling parameters S and the original 
extracted data D. 

The complementary information preferably contains original data D. The modeling 
parameters or grains S from which these positions are generated are backed up in the place of 

« 

positions P. The grains are advantageously the data extracted from the original stream, thus 
guaranteeing high randomness or a combination of this tiie data, which brings about an increase ef in 
the complexity of the chaining chain between grains. For example, a grain is selected for the first 
position using a random process and a second grain combination of the first grain with the value of 
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the extracted data is made for the second position of data to be extracted, and so forth. This 
operation guarantees for each random process a random re-initialization of the generator (the 
extracted value being random). In order to avoid a portion of the protected stream from being 
compromis e d in th e case that th e first grain would b e found, a A grain of 64 bits or 128 bits 
generated by a true random process is selected to avoid a portion of the protected stream from being 
compromised in the case that the first grain would be found . It proved to be difficult in this case to 
reconstitute the original positions since the positions are modeled from the grain in combination with 
the values of the original data of the stream. 



Kindly replace paragraphs [0065] to [0068] with the following: 

The complementary information is preferably specific to the analysis equipment that 
generates it with the aid of characteristics belonging to this the equipment. Consequently, the 
complementary information will be freely broadcast because it can be interpreted solely by this the 
analysis equipment or by other analysis equipment having exactly the same characteristics. The 
pseudorandom generator advantageously has a modeling belonging to the analysis equipment and/or 
relative to at least one characteristic belonging to the analysis equipment. In on e e mbodim e nt thes e 
The modeling are may be stored in the analysis equipment. In anoth e r embodim e nt th e s e The 
modelings are may also be stored in the equipment of the addressee. Th e se The modelings are 
advantageously stored in a smart card of the equipment of the addressee. Thes e The modelings of 
the equipment of the addressee are preferably sent to the analysis equipment for ^ generation of 
complementary information personalized for the equipment of the addressee. 
[0003] Figur e Fig. 3 shows a scheme with a purely explanatory description of a preferred a noH- 
limiting e mbodiment particular to a client-server system for implementing the proces s in accordanc e 
with th e invention . 

Original audiovisual digital stream 1 to be secured is passed via. a link 2 to analysis and 
protection module 3 1 that generates modified main stream 32 in a format advantageously identical to 
the format of input stream 1 , aside from which certain original data was replaced by values different 
from the original ones and stored on server 3. The complementary information 33 in any format 
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contains the values of the original data and the modeling parameters relative to the characteristics of 
the original modified, replaced, substituted or moved data. This The complementary information 33 
is also stored on server 3. 

Modified main stream 32 is then transmitted via high-throughput network 5 of the 
microwave, cable, satellite type, etc., to the terminal of user 8 and is stored in memory 8 1 , that can 
be, e.g., a hard disk. When user 8 requests to view the audiovisual sequence present in his memory 
8 1 , two things are possible: In the first instance^ user 8 does not have all the rights necessary to view 
the audiovisual stream and in this instance audiovisual stream 32 generated by analysis module 3 1 
present in his memory 81 is passed to synthesis system 86 via reading buffer memory 83 that does 
not modify it and transmits it identically to a reader capable of decoding it 87, and its content, 
degraded visually and/or auditorily by scrambling module 31 is displayed on viewing screen 9. 

In the second instance^ server 3 decides that user 8 has the rights to view the audiovisual 
stream. In this instance^ synthesis module 86 makes a viewing request to server 3 containing 
complementary information 33 necessary for ^ recomposition of original sequence 1 . Server 3 then 
sends complementary information 33 via telecommunication networks of the analog or digital 
telephone line type, DSL (Digital Subscriber Line) or BLR (Loop Local Radio) type, via DAB 
networks (Digital Audio Broadcasting) or via digital mobile telecommunication networks (GSM, 
GPRS, UMTS) 7, which permits ^ reconstitution of the original audiovisual stream in such a 
manner that user 8 can store it in buffer memory 85. Network 7 can advantageously be of the same 
type as network 5. 

Kindly replace paragraphs [0073] and [0074] with the following: 

Modified main stream 32 is advantageously inscribed (recorded) on a physical support like a 
disk of the CD-ROM or DVD type, a hard disk or a memory card 4. Modified main stream 32 is 
then read from physical support 4 by reader 82 of box 8 in ord e r to be transmitted to reading buffer 
memory 83, then to synthesis module 86. 

Complementary information 33 is advantageously recorded on a physical support 6 with a 
credit card format constituted fey of a smart card or a flash memory card. This card 6 is then read by 
card reader 84 of the apparatus of user 8. 
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